package com.gavin.captcha.controller;

import cn.hutool.captcha.CaptchaUtil;
import cn.hutool.captcha.ShearCaptcha;
import com.gavin.captcha.model.CaptchaProperties;
import jakarta.servlet.http.HttpServletResponse;
import jakarta.servlet.http.HttpSession;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.util.StringUtils;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

import java.io.IOException;
import java.util.Date;

@RequestMapping("/captcha")
@RestController
public class CaptchaController {
    @Autowired
    private CaptchaProperties captchaProperties;
    private final static Long VALID_TIME=30*60*1000L;

    @RequestMapping("/getCaptcha")
    public void getCaptcha(HttpSession session, HttpServletResponse response){
        response.setContentType("image/jpeg");
        response.setHeader("Pragma", "No-cahce");
//        response.setCharacterEncoding("utf-8");
        //生成验证码
        try{
            ShearCaptcha captcha = CaptchaUtil.createShearCaptcha(captchaProperties.getWidth(),captchaProperties.getHeight());
            String code=captcha.getCode();
            session.setAttribute(captchaProperties.getSession().getKey(),code);
            session.setAttribute(captchaProperties.getSession().getDate(),new Date());
            captcha.write(response.getOutputStream());
        }catch (IOException e) {
            throw new RuntimeException(e);
        }
    }

    /**
     * 验证用户输入的验证码是否正确
     * @param captcha： 用户输入的验证码
     * @param session
     * @return false： 校验失败，true: 成功
     */

    @RequestMapping("/check")
    public Boolean check(String captcha,HttpSession session){
        if(!StringUtils.hasLength(captcha)){
            return false;
        }
        //验证验证码
        String code=(String) session.getAttribute(captchaProperties.getSession().getKey());
        Date date=(Date)session.getAttribute(captchaProperties.getSession().getDate());
        //验证码正确，且没有过期
        if(captcha.equalsIgnoreCase(code)&&date!=null
                &&System.currentTimeMillis()-date.getTime()<VALID_TIME){
            return true;
        }
        return false;
    }
}
